Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/8gw95cqMqzJS8nUWUFNydY9IcsY.roa
File: 8gw95cqMqzJS8nUWUFNydY9IcsY.roa (raw, json)
Hash identifier: cEYqviXaYm2xy/7vAdnxx1lYHr0mfxfaY8XEKvDPocw=
Subject key identifier: F2:0C:3D:E5:CA:8C:AB:32:52:F2:75:16:50:53:72:75:8F:48:72:C6
Certificate issuer: /CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Certificate serial: 01856FCBAFCD3AFD66C63DA2B4C30E17E3B7
Authority key identifier: 65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/8gw95cqMqzJS8nUWUFNydY9IcsY.roa
Signing time: Mon 02 Jan 2023 00:04:57 +0000
ROA not before: Mon 02 Jan 2023 00:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196864
IP address blocks: 193.93.169.0/24 maxlen: 24
193.93.168.0/22 maxlen: 22
193.93.168.0/24 maxlen: 24
193.93.171.0/24 maxlen: 24
193.93.170.0/24 maxlen: 24
2001:67c:1908::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:af:cd:3a:fd:66:c6:3d:a2:b4:c3:0e:17:e3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Validity
Not Before: Jan 2 00:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f20c3de5ca8cab3252f27516505372758f4872c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:43:8b:f0:cb:f7:04:27:dd:f1:73:50:b3:
b7:04:b9:49:b1:6a:85:21:b5:81:89:c4:7a:d6:9d:
55:03:49:e3:c6:38:aa:55:ac:56:e5:b5:4e:ff:64:
15:96:80:c6:42:8e:c5:74:e4:60:f1:ea:a1:4c:4f:
32:80:d1:49:d2:2d:86:a7:13:e9:44:0c:2a:8d:1b:
cf:43:7c:f2:b7:af:d2:c3:6c:04:5a:fe:6b:10:dd:
50:64:1a:54:69:26:15:87:6c:a3:a3:76:e3:ca:3b:
b0:cd:a2:26:f7:64:b8:0a:d2:33:2d:24:47:bc:0f:
3c:ad:6b:ec:f0:91:8d:6c:0d:b4:12:54:3a:26:aa:
05:7a:cf:d3:50:02:7a:1b:2c:bc:a5:d2:4e:47:06:
33:40:06:af:fc:5d:66:ba:d0:91:e4:2c:11:ed:ce:
09:68:05:c0:98:6a:1c:a8:cb:23:3c:98:6d:4a:b2:
7d:8a:6e:84:b1:7f:a1:7a:a3:2c:75:3f:b6:ec:fd:
4d:45:09:4c:58:f3:97:a0:ea:cb:0a:cc:c4:60:9f:
19:d9:8d:f5:1d:bb:cb:48:a2:e4:e1:d2:e7:98:86:
5e:b8:89:29:eb:19:0a:81:fb:db:68:ad:d8:c6:91:
17:a5:f2:06:c9:8a:76:a4:fe:63:9d:16:6d:d4:5f:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0C:3D:E5:CA:8C:AB:32:52:F2:75:16:50:53:72:75:8F:48:72:C6
X509v3 Authority Key Identifier:
keyid:65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/8gw95cqMqzJS8nUWUFNydY9IcsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.168.0/22
IPv6:
2001:67c:1908::/48
Signature Algorithm: sha256WithRSAEncryption
10:8c:78:ce:76:84:c3:c2:1b:aa:f7:fa:38:fa:ef:42:71:fe:
ee:b9:fb:7b:b6:50:36:c6:ca:c4:9b:1b:92:85:92:61:b4:ba:
12:db:42:cd:c4:05:56:5d:f5:aa:d3:9f:f8:c0:f7:ca:d3:2d:
68:46:e2:a9:e8:fa:1e:cf:14:64:f5:9b:4c:35:84:17:54:71:
71:f0:36:bc:9a:5f:dd:2c:d1:c4:b1:a9:b3:9d:f1:95:5f:ce:
82:96:eb:40:c6:af:b0:09:d6:fd:35:3b:54:d9:27:7e:7e:51:
ff:9f:3a:c5:58:72:61:b5:c7:19:91:cf:d5:9d:68:d2:5f:c9:
e5:17:e0:87:57:84:2e:f1:d4:b7:08:8d:b6:00:56:eb:7d:db:
97:d5:f8:99:63:76:0d:93:55:c0:16:c2:f2:64:7b:ce:12:d3:
32:25:e0:be:a8:c9:62:f2:79:47:46:d4:c3:6f:0a:32:2f:f6:
47:17:b3:3b:78:e2:c3:d3:2a:9c:98:e8:23:2e:d3:09:31:37:
98:88:8c:a4:5b:a3:3f:dd:28:76:5b:ab:7b:9a:ae:29:e0:0a:
8b:14:e1:dd:74:0e:cb:1c:aa:20:2a:c8:0c:61:01:3a:d0:de:
a6:1c:3a:38:7b:8e:fa:2f:34:02:52:94:f7:d5:1a:c5:44:df:
35:4b:19:00
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVvy6/NOv1mxj2itMMOF+O3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MjgyYmY1MmJmYjgwZjExMDZiM2MwZWNkZmExYTU0MzMz
MDUwODYwHhcNMjMwMTAyMDAwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjBjM2RlNWNhOGNhYjMyNTJmMjc1MTY1MDUzNzI3NThmNDg3MmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+dDi/DL9wQn3fFzULO3BLlJsWqF
IbWBicR61p1VA0njxjiqVaxW5bVO/2QVloDGQo7FdORg8eqhTE8ygNFJ0i2GpxPp
RAwqjRvPQ3zyt6/Sw2wEWv5rEN1QZBpUaSYVh2yjo3bjyjuwzaIm92S4CtIzLSRH
vA88rWvs8JGNbA20ElQ6JqoFes/TUAJ6Gyy8pdJORwYzQAav/F1mutCR5CwR7c4J
aAXAmGocqMsjPJhtSrJ9im6EsX+heqMsdT+27P1NRQlMWPOXoOrLCszEYJ8Z2Y31
HbvLSKLk4dLnmIZeuIkp6xkKgfvbaK3YxpEXpfIGyYp2pP5jnRZt1F//iQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPIMPeXKjKsyUvJ1FlBTcnWPSHLGMB8GA1UdIwQY
MBaAFGUoK/Ur+4DxEGs8Ds36GlQzMFCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlNncjlTdjdnUEVRYXp3T3pmb2FWRE13VUlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kYzdlNjUtOWIzYi00MTM1LTlkYjkt
MGMxZTRmZGZhYzVhLzEvOGd3OTVjcU1xekpTOG5VV1VGTnlkWTlJY3NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kYzdlNjUtOWIzYi00MTM1LTlkYjktMGMxZTRmZGZhYzVh
LzEvWlNncjlTdjdnUEVRYXp3T3pmb2FWRE13VUlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwV2oMA8E
AgACMAkDBwAgAQZ8GQgwDQYJKoZIhvcNAQELBQADggEBABCMeM52hMPCG6r3+jj6
70Jx/u65+3u2UDbGysSbG5KFkmG0uhLbQs3EBVZd9arTn/jA98rTLWhG4qno+h7P
FGT1m0w1hBdUcXHwNryaX90s0cSxqbOd8ZVfzoKW60DGr7AJ1v01O1TZJ35+Uf+f
OsVYcmG1xxmRz9WdaNJfyeUX4IdXhC7x1LcIjbYAVut925fV+Jljdg2TVcAWwvJk
e84S0zIl4L6oyWLyeUdG1MNvCjIv9kcXszt44sPTKpyY6CMu0wkxN5iIjKRboz/d
KHZbq3uaringCosU4d10DsscqiAqyAxhATrQ3qYcOjh7jvovNAJSlPfVGsVE3zVL
GQA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:26 2024 by rpki-client on console-ams.rpki-client.org